vendor:
Word
by:
SecurityFocus
7.5
CVSS
HIGH
Memory Corruption
119
CWE
Product Name: Word
Affected Version From: Microsoft Word 2002 (10.2627.3311)
Affected Version To: Microsoft Word 2002 (10.2627.3311)
Patch Exists: Yes
Related CWE: N/A
CPE: a:microsoft:word
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2002
Microsoft Word Memory Structure Vulnerability
It has been reported that Microsoft Word is prone to a vulnerability that may allow an attacker to crash the software. The problem occurs when an attacker modifies the memory structure of a Word document. If a user opens the malformed document, it would cause the software to crash. This could potentially allow for corruption of memory, resulting in a possibility of arbitrary code execution, though this has not been confirmed.
Mitigation:
Users should avoid opening untrusted documents.